regulatory-compliance-monitoring

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 1.00). The SKILL.md Step 2 "Conduct Regulatory Horizon Scanning" explicitly requires monitoring and ingesting public third‑party sources (Federal Register, regulator RSS feeds, FINRA/SEC notices, news sites linked in the References) which the workflow uses to triage and drive impact assessments and remediation decisions, exposing the agent to untrusted open‑web content that could indirectly inject instructions.